Privacy policy
This policy describes what personal data we process when you visit this website, write to us or buy from us, why we do it, and what rights you have.
This English version is a translation for your convenience. The German version is the one that applies.
1. Controller
1985 Studio
Owner: Michael Ilic
Schleißheimer Straße 257
80809 München
Germany
Email: ciao@1985.studio
More details are in the imprint.
2. In short
- This website shows our work. It has no shop, no customer accounts and no forms. To buy something, you write to us.
- It sets no cookies, uses no analytics, advertising or tracking services, and loads nothing from other servers.
- We process data about you only when you visit the website, write to us or buy from us, and only as far as that requires.
3. Visiting the website
When you open a page, your browser sends data to the servers that deliver this website. They keep it in log files: your IP address, the date and time, the page or file requested, the amount of data sent, whether the request succeeded, the page you came from (referrer), and your browser and operating system.
We need this data to deliver the website and keep it secure and stable, for example to detect attacks. That is our legitimate interest (Art. 6(1)(f) GDPR). How long the provider keeps the log files is up to the provider; the details are in its privacy policy.
The website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (privacy policy (opens in a new tab)). The provider processes the data on our behalf, under a data processing agreement (Art. 28 GDPR).
Cloudflare, Inc. delivers the website from servers in many countries, usually close to you, and may process data in the United States as well. The transfer rests on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, under which Cloudflare, Inc. is certified (Art. 45 GDPR). If that basis falls away, the European Commission’s standard contractual clauses apply, which are part of our contract with Cloudflare, Inc. (Art. 46 GDPR).
5. When you write to us
When you write to us by email or on Instagram, we process what you tell us: usually your name, your email address or Instagram name, and your message. We use it to reply to you.
If it is about a purchase or a commission, the legal basis is Art. 6(1)(b) GDPR (a contract, or steps towards one); otherwise it is our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
Email to ciao@1985.studio is stored by Strato GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin (privacy policy (opens in a new tab)) on our behalf (Art. 28 GDPR).
When you message us on Instagram, Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, processes your message too, under its own rules and in the United States as well, relying on the EU-US Data Privacy Framework. The details are in Instagram’s privacy policy (opens in a new tab).
We delete your messages once your enquiry is settled, unless we have to keep them. If the enquiry becomes a purchase, the next section applies.
6. When you buy from us
When you buy a piece or commission one, we process the data we need for it: your name, delivery and billing address, email address, a phone number if needed, what you ordered and how you pay. The legal basis is the contract (Art. 6(1)(b) GDPR).
We pass this data on only as far as the contract requires: to the carrier who delivers your parcel, to the bank or payment service you pay through, and, where necessary, to tax advisers and the tax authorities.
We keep invoices and other accounting records for eight years and business letters for six, because tax law requires it (§ 147 AO; Art. 6(1)(c) GDPR). Anything we do not have to keep, we delete once the contract is fulfilled and the warranty period has ended.
7. Your rights
You have the right to:
- access the data we process about you (Art. 15 GDPR)
- have wrong data corrected (Art. 16 GDPR)
- have your data erased (Art. 17 GDPR)
- restrict how we process it (Art. 18 GDPR)
- data portability, meaning you receive your data in a common, machine-readable format (Art. 20 GDPR)
To use any of them, write to us at ciao@1985.studio.
7.1 Objection
Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). We then stop, unless we have compelling legitimate grounds that override your interests, or need the data to establish, exercise or defend legal claims.
7.2 Complaints
You can complain to a data protection supervisory authority (Art. 77 GDPR). The one responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de (opens in a new tab).
8. Do you have to give us data?
No. But without your contact details we cannot reply, and without your address we cannot deliver. We make no automated decisions about you and build no profiles.